Appl. No. 10/004,301 

Amendment dated June 13, 2005 

Reply to Office Action mailed March 22, 2005 

Amendments to the Specification: 

Please replace the paragraph at page 15, lines 7-15 with the following amended 
paragraph: 

The resource servers can include secure and open servers. Referring to FIG. 7, 
a pair of SSO products 732A and 732B protect secure stock quotes server 506 
and Web secure web search server 708340. SSO products 734A and 734B 732 
respectively include a* i ntorc e ptor interceptors 740A and 740B , aft authentication 
servers s er v e r 742A and 742B , and a policy servers s e rv e r 744A and 744B . For 
s i mp li c i ty, th e s e compon e nts ar e shown only for SSO product 732B. I n addition, 
a pair of differ e nt SSO products 734 A and 73d B protect s e cur e W e b s e arch 
sorvor 708 and Web s e rv e r 310. SSO products 734 i nc l ude an intorceptor 740B, 
an authentication s e rver 74 2B, and a po l icy sorvor 74 IB. For s i mp l icity, th e s e 
compononts are shown on l y for SSO product 734 B. Note that SSO products 
732A and 732B 732 and 734 are different SSO products, for example, 
manufactured by different SSO vendors. 

Please replace the paragraph at page 1 1 , line 28-page 12, line 3, with the 
following amended paragraph: 

In general, all resources secured by an SSO product trust the SSO product to 
request and process credentials from its users. Most SSO products attach to 
many kinds of user and group stores, such as LDAP (lightweight development 
access protocol), NT (new technology; Microsoft Windows™ ) . or ODBC 
(Oracle™ or open database connectivity) databases. Administrators can choose 
to protect all or only a few of their Web servers with an SSO product. If the portal 
has users (such as business partners) who do not have accounts with the SSO 
product, these users must log in through a virtual directory that is not protected 
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by SSO. However, if all of the portal users are SSO users, then the administrator 
can enable SSO on every portal server. 

Please replace the paragraph at page 17, line 12-page 18, line 3 with the 
following amended paragraph: 

The invention can be implemented in digital electronic circuitry, or in computer 
hardware, firmware, software, or in combinations of them. Apparatus of the 
invention can be implemented in a computer program product tangibly embodied 
in a machine-readable storage device for execution by a programmable 
processor; and method steps of the invention can be performed by a 
programmable processor executing a program of instructions to perform 
functions of the invention by operating on input data and generating output. The 
invention can be implemented advantageously in one or more computer 
programs that are executable on a programmable system including at least one 
programmable processor coupled to receive data and instructions from, and to 
transmit data and instructions to, a data storage system, at least one input 
device, and at least one output device. Each computer program can be 
implemented in a high-level procedural or object-oriented programming 
language, or in assembly or machine language if desired; and in any case, the 
language can be a compiled or interpreted language. Suitable processors 
include, by way of example, both general and special purpose microprocessors. 
Generally, a processor will receive instructions and data from a read-only 
memory and/or a random access memory. Generally, a computer will include one 
or more mass storage devices for storing data files; such devices include 
magnetic disks, such as internal hard disks and removable disks; magneto- 
optical disks; and optical disks. Storage devices suitable for tangibly embodying 
computer program instructions and data include all forms of non-volatile memory, 
including by way of example semiconductor memory devices, such as EPROM 
(erasable programmable read-only memory) , EEPROM (electrically erasable 
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programmable read-only memory) , and flash memory devices; magnetic disks 
such as internal hard disks and removable disks; magneto-optical disks; and CD- 
ROM disks. Any of the foregoing can be supplemented by, or incorporated in, 
ASICs (application-specific integrated circuits). 
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